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DETAILED ACTION 



Claims 1-20 are pending 
Claim 1 is amended 
Claims 10-20 are new 



Claim Objections 

Claims 10-18, 20 are objected to because of the following informalities: Claim 10 
claims an apparatus, the apparatus comprising: M members for delegating signings, a 
delegation arrangement, a terminal, and a transmitter. It appears the Applicant is 
claiming a system and not an apparatus. Appropriate correction is required. 

Claim Rejections - 35 USC § 112 
The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 



Claims 10-18, 20 are rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 
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Claim 10 recites the limitation "a delegation arrangement." The term "delegation 
arrangement" is not well known in the art, nor is it supported in the specification. 

Claims 11-18, 20 depend on Claim 10 an are rejected for the same rationale. 

Specification 

Extensive mechanical and design details of apparatus should not be given. 

The abstract of the disclosure is objected to because the inclusion of legal 
phraseology. The term "a posteriori" is considered legal phraseology. Correction is 
required. See MPEP § 608.01(b). 



Response to Arguments 

Applicant's arguments with respect to claims 1-9 have been considered but are 
moot in view of the new ground(s) of rejection. 

In the Examiner's first Office Action, the Examiner gave a 112 2 nd rejection. The 
Applicant has amended Claim 1 . The Amended claims change the scope of the claims 
and require a new search. 

For example the original claim recited "reading first information on said M first 
members and second information on said N second members in delegation means from 
said terminal." The Examiner interpreted that the reading, applying and transmitting 
were done by the "delegation means" and the information coming from the terminal. As 
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amended, the claims now read "reading from said terminal first information on said M 
first members and second information on N second members included in delegation 
means. 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

This application currently names joint inventors. In considering patentability of 

the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 

the various claims was commonly owned at the time any inventions covered therein 

were made absent any evidence to the contrary. Applicant is advised of the obligation 

under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 

not commonly owned at the time a later invention was made in order for the examiner to 

consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 

prior art under 35 U.S.C. 103(a). 

Claims 1-8, 10-17, 19-20 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Brickell (US20030145223) in view of Sudia (5825880). 
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Brickell teaches the system and method of delegating signing of predetermined 
data by a given one of M first members mandated by N second members, M and N 
being integers of which one is equal to 1 and the other is at least equal to 2 five refer to 
a user who is engaged in a delegation relationship as either a delegator who assigns a 
delegation authority or a delegate who is assigned a delegation authority" Paragraph [0022]", 
The Examiner interprets M first members as the delegates, and the Examiner further interprets 
the N second members as the delegators), the given first member having a terminal ("the 
processing described below may be performed by a.. .general purpose computer" Paragraph 
[0021]) containing first information on said given first member ("A user... with appropriate 
credential information" Paragraph [0023]), said method comprising the following steps: 

Reading first information on said M first members and second information on said 
N second members in delegation means responsive to a first identifier of said given 
first member included in said first information and transmitted by said terminal to said 
delegation means, ("A user who requests a delegation service may provide information 
relevant to the delegation such as the identities of the delegator and the delegate" Paragraph 
[0044]). The Examiner interprets the DCSP (Delegate Credential Service Provider, 
shown in Fig. 7, as the delegation means. The Examiner interprets reading first and 
second information as the identities of the delegator and delegate. 

Brickell further teaches applying predetermined data, said first information, said 
second information, and a first private key of said given first member to a cryptographic 
algorithm implemented in said terminal to produce a signature. ("The 
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delegate... requests... as service from the relying party. The delegate signs this... with his 
private signature key" Paragraph [0033]). It is inherent that the private signature key is for 
producing a signature. It has already been cited above that request requires relevant 
information needs to be produced including the identities of the delegator and delegate 
(1 st information and 2 nd information). It is inherent that if a delegate is used there must 
be a predetermined data selected for delegation. 

Brickell further teaches transmitting said predetermined data, said first 
information, said second information, and said signature to any user terminal interested 
in said predetermined data. ("With the returned credential information, the relying party 
authenticates the delegate.... based on the authentication result, the relying part generates. ..a 
service response and sends... the response back to the delegate" Paragraph [0033]). The 
Examiner interprets transmitting the data was the response being sent back. 

While Brickell teaches the delegation means reading in the delegation 
information, Brickell does not explicitly teach reading from the terminal (delegate) first 
and second information, or transmitting predetermined data from the delegate to any 
user terminal. 

Sudia teaches a multi-step digital signature method which involves "an original 
authorizing agent ("primary user") to issue a specialized "delegation" certificate to 
substitute authorizing agent ("delegate"). The certificate, signed by the primary user, 
would identify the delegate and the delegate's public signature verification key... A 
delegate, using his/her personal smart card, would sign a document using the 
delegate's personal signature key and would attach the delegation certificate. Resulting 
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documents would be signed by the delegate, not the primary user, and a document 
recipient msut undertake additional steps to verify the delegate's signature and the 
delegate certificate." (Column 27, lines 51-62) The Examiner interprets the delegate 
receiving the delegation certificate as receiving the first and second information, and the 
document recipient as the user that the data is transferred to. 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify the delegation means which includes the identities of the delegators 
and delegates, as taught by Brickell, with the delegate signing method as taught by 
Sudia. 

The prior art Brickell included each element claimed (Delegator, Delegate, 
Delegation Means, User, Delegation Certificate, Signature) and one of ordinary skill in 
the art could have combined the elements as claimed by known methods (Digital 
Signing by the delegate, as taught by Sudia) and that in combination, each element 
merely would have performed the same function as it did separately. One of ordinary 
skill in the art would have recognized that the results of the combination were 
predictable. 

The cited art above also teaches the apparatus associated with the method 
above, in particular the given M first members for delegating the signing, the N second 
members for mandating the signing ("we refer to a user who is engaged in a delegation 
relationship as either a delegator who assigns a delegation authority or a delegate who is 
assigned a delegation authority" Paragraph [0022]", The Examiner interprets M first members 
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as the delegates, and the Examiner further interprets the N second members as the 
delegators). The terminal which has a cryptographic capabilities, ("the processing 
described below may be performed by a.. .general purpose computer" Paragraph [0021]) ("The 
delegate. . .requests... as service from the relying party. The delegate signs this. ..with his 
private signature key" Paragraph [0033]) 

Regarding Claims 2, 11 

Brickell and Sudia teach the system and method claimed in claim 1, wherein said 
second information on a second member comprises at least an identifier of said 
second member. ("A user who requests a delegation service may provide information 
relevant to the delegation such as the identities of the delegator and the delegate" Paragraph 
[0044]) 



Regarding Claims 3-4, 12-13 

Brickell and Sudia teach the method claimed in claim 1 wherein said second 
information on a second member further comprises a public key of said second 
member, also wherein said second information on a second member further comprises 
an electronic certificate of said second member. 
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("A user's digital certificate may comprise.. .a user's public key" Paragraph [0034], 
Brickell) 

Regarding Claim 5, 14 

Brickell and Sudia teach the method claimed in claim 1 wherein said first 
information on a first member comprises an electronic certificate of said first member. 
(Fig. 5, Delegation Certificate, Brickell) 

Regarding Claim 6, 15 

Brickell and Sudia teach the method claimed in claim 1. Brickell further teaches 
wherein said integer M (delegate) is equal to 1 and said integer N (delegator) is at least 
equal to 2. ("The DCSP interfaces with both delegates 210a. ..220b and delegators 
210... 220a... The DCSP comprises a service registration interface that interfaces with 
users (delegates and delegators) for subscription and registration purposes" Paragraph 
[0042]) ( "A delegate may refer to any user. For example, a user who may be a 
delegator in a separate delegation relationship may independently send a service 
request to the relying party" Paragraph [00331 Brickell) 

The above references teach that there are groups of delegates and delegators, 
where the DCSP assigns the relations between them. The references further teach that 
an user may either a delegator or a delegate or both. Therefore it is inherent that 
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Brickell anticipates where the integer M is equal to 1 and integer N is at least equal to 
2. 

Regarding Claim 7, 16 

Brickell and Sudia teach the method claimed in claim 1 . Brickell further teaches 
("The DCSP interfaces with both delegates 210a. ..220b and delegators 210. ..220a" 
Paragraph [0042]), wherein said integer N (delegator) is equal to 1 and said integer M 
(delegate) is at least equal to 2 ("a relying party authorizes services to a plurality of 
delegates." Paragraph [0022], Brickell) 



Regarding Claim 8, 17 

Brickell and Sudia teach the method claimed in claim 1 wherein said M first 
members and said N second members constitute a group of members. ("The DCSP 
interfaces with both delegates 210a. ..220b and delegators 210. ..220a" Paragraph 
[0042], Brickell) 



Regarding Claims 19-20, 



Application/Control Number: 10/732,808 Page 11 

Art Unit: 2139 

Brickell and Sudia teach the system and method of Claim 1. Brickell and Sudia 
further teach predetermined data, first information, second information, and a first 
private key to produce a signature. Figure 5 of Brickell teaches delegate identity, 
delegator identity, which the Examiner interprets as 1 st and 2 nd information. Column 27 
of Sudia teaches predetermined data ("document") and a private key ("delegate's 
personal signature key"). 

Brickell and Sudia do not explicitly teach concatenating the predetermined data, 
first and second inforamtion and the first private key. 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to concatenate the predetermined data, first and second information and the 
first private key. 

The prior art Brickell and Sudia include each element claimed (delegate and 
delegator ID, predetermined data, and private key) and one of ordinary skill in the art 
could have combined the elements as claimed by known methods (concatenation) and 
that in combination, each element merely would have performed the same function as it 
did separately. One of ordinary skill in the art would have recognized that the results of 
the combination were predictable. 

Claims 9-18 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Brickell and Sudia further in view of Garay (6839436) . 
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Regarding Claims 9, 18 

Brickell and Sudia teach the system and method claimed in claim 1. Brickell 
does not explicitly teach comprising loading predetermined data and a signature 
program including at least part of said cryptographic algorithm from at least one server 
connected to said terminal of said given first member before verification of said 
predetermined data by said given first member. 

As disclosed in the rejection of Claim 1, Brickell teaches a Delegation Credential 
Service Provider, where upon authenticating the delegate predetermined data is 
transferred to the delegate. ("With the returned credential information, the relying party 
authenticates the delegate.... based on the authentication result, the relying part generates... a 
sen/ice response and sends... the response back to the delegate" Paragraph [0033]). 

Garay teaches "In general, broadcast encryption techniques are employed to 
encrypt digital content to ensure that only privileged users are able to recover the 
content from an encrypted broadcast" Column 1 lines 12-16. 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to send encrypted predetermined data to the delegate instead of loading 
before verification of said predetermined data. 
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The motivation to send encrypted predetermined data to the delegate is to 
perform the authentication at the delegate. The concept of broadcast encryption where 
data is sent first and then decrypted at the receiver is well known in the art. 



Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Harris C. Wang whose telephone number is 
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5712701462. The examiner can normally be reached on M-F 8-5:30, Alternate Fridays 
Off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, AYAZ R. SHEIKH can be reached on (571)272-3795. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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